Welcome to ISAserver.org

Access Policies Messing up

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Access Policies Messing up

Page: [1]

Message

<< Older Topic Newer Topic >>

Access Policies Messing up - 12.Dec.2006 2:02:27 PM

skamionek

Posts: 28
Joined: 1.Sep.2006
Status: offline

Please help.   I have tried everything and I'm going crazy.

Access Policies:

RPC
           Action-Allow      Protocols-All Outbound   From � Internal/LocalHost To � Internal/LocalHost   Condition �
All Users

SMTP
           Action-Allow      Protocols-SMTP Server   From � External To � 10.0.0.12   Condition �
All Users

NJG-Restricted
           Action-Deny      Protocols-All Outbound   From � Internal To � External and NJG-AllowedWebsites   Condition �

NJG-WebAccess

NJG-Full
           Action-Allow      Protocols-All Outbound   From � Internal To � External   Condition � NJG-FullWebAccess

Test
           Action-Allow      Protocols-All Outbound   From � Internal To � External   Condition � All Users

Default
           Action-Deny      Protocols-All Traffic   From � All Networks To � All Networks   Condition � All Users

NJG-AllowedWebSites = Domain list of allowed websites
NJG-WebAccess = List of Domain Users that have limited web access
NJG-FullWebAccess = List of Domain Users that have full web access

Issues:
1.                   If NJG-Restricted is enabled a user in group NJG-FullWebAccess they cannot FTP
2.                   If NJG-Restricted and NJG-Full are enabled a user in NJG-FullWebAccess cannot FTP
3.                   If NJG-Restricted has an exception for Condition of NJG-FullWebAccess a user in NJG-WebAccess has Full web access

Also when the first is enabled users try an approved website with http://www.domainname.com they can get to the website but when they use http://domainname.com or just domainname.com they get the denied webpage.

Please help!!!! I need to sleep

Post #: 1

Featured Links*

RE: Access Policies Messing up - 13.Dec.2006 7:50:19 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Make sure the users haven't disabled the Firewall client.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to skamionek)

Post #: 2

RE: Access Policies Messing up - 13.Dec.2006 4:48:08 PM

skamionek

Posts: 28
Joined: 1.Sep.2006
Status: offline

Tom,
The users, how can we stop them from closing the client? Both groups have the client installed but the Full access group fails.

We have the two groups then we have the IT group. We don't want the ISA client and want to have access to the outside world

(in reply to tshinder)

Post #: 3